Katie Sexton

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers (affected versions not specified) Description: An unauthenticated command injection issue exists in the parameters of operation 10 in the controller server service. This allows an unauthenticated remote attacker on the same network to execute commands as root on the device by sending a specially crafted malicious packet to the controller server service on port 9999, specifically the `/controller server` endpoint, using vulnerable parameters. Recommendations: As a temporary workaround, consider restricting access to the controller server service on port 9999 until a patch is available. Avoid using the vulnerable parameters in operation 10 of the controller server service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers (affected versions not specified) Description: An unauthenticated command injection issue exists in the parameters of operation 32 in the controller server service. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller server service on port 9999, specifically the "controller server" service. Recommendations: As a temporary workaround, consider restricting access to the controller server service on port 9999 to minimize the risk of exploitation. Avoid using the vulnerable operation 32 in the controller server service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers (affected versions not specified) Description: An unauthenticated command injection issue exists in the parameters of operation 41 in the controller server service. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller server service on port 9999, specifically the "controller server" service. Recommendations: As a temporary workaround, consider restricting access to the controller server service on port 9999 to minimize the risk of exploitation. Avoid using the parameters of operation 41 in the controller server service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Gryphon devices (affected versions not specified) Description: An unprotected ssh private key exists on the Gryphon devices, which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. The ssh key could be used to login to the development server hosted in Amazon Web Services. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.